CVE-2025-38325

ksmbd: add free_transport ops in ksmbd connection

State: Published
Severity: 9.8 Critical
Published: Jul 10, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: add free_transport ops in ksmbd connection

free_transport function for tcp connection can be called from smbdirect. It will cause kernel oops. This patch add free_transport ops in ksmbd connection, and add each free_transports for tcp and smbdirect.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da8bd9a10ecd718692732294d15fd801c0eabb5 to before 52f5a52dc17a4a7b4363ac03fe2c4ef26f020dc6Affected 1aec4d14cf81b7b3e7b69eb1cfa94144eed7138e to before 3890da762a66191c440b0bd6e3ee45501edbb0c1Affected 21a4e47578d44c6b37c4fc4aba8ed7cc8dbb13de to before 3f3aae77280aad9f5acc6709c596148966f765c7Affected 21a4e47578d44c6b37c4fc4aba8ed7cc8dbb13de to before a89f5fae998bdc4d0505306f93844c9ae059d50cAffected e59796fc80603bcd8569d4d2e10b213c1918edb4Affected 6.12.26 to before 6.12.35Affected 6.14.4 to before 6.15Affected
LinuxLinux	6.15Affected before 6.15Not affected 6.12.35 through 6.12.Not affected 6.15.4 through 6.15.Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

1da8bd9a10ecd718692732294d15fd801c0eabb5 to before 52f5a52dc17a4a7b4363ac03fe2c4ef26f020dc6Affected
1aec4d14cf81b7b3e7b69eb1cfa94144eed7138e to before 3890da762a66191c440b0bd6e3ee45501edbb0c1Affected
21a4e47578d44c6b37c4fc4aba8ed7cc8dbb13de to before 3f3aae77280aad9f5acc6709c596148966f765c7Affected
21a4e47578d44c6b37c4fc4aba8ed7cc8dbb13de to before a89f5fae998bdc4d0505306f93844c9ae059d50cAffected
e59796fc80603bcd8569d4d2e10b213c1918edb4Affected
6.12.26 to before 6.12.35Affected
6.14.4 to before 6.15Affected

LinuxLinux

6.15Affected
before 6.15Not affected
6.12.35 through 6.12.*Not affected
6.15.4 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.